access-control-sandboxed-iframe.html (480B)
1 <!DOCTYPE html> 2 <html> 3 <body> 4 <script type="text/javascript"> 5 window.addEventListener("message", (evt) => { 6 const url = evt.data; 7 const xhr = new XMLHttpRequest; 8 9 xhr.open("GET", url, false); 10 11 try { 12 xhr.send(); 13 } catch(e) { 14 parent.postMessage("Exception thrown. Sandboxed iframe XHR access was denied in 'send'.", "*"); 15 return; 16 } 17 18 parent.postMessage(xhr.responseText, "*"); 19 }, false); 20 21 parent.postMessage("ready", "*"); 22 </script> 23 </body> 24 </html>